@withbuddi/buddi 0.1.0-pre.43 → 0.1.0-pre.45

package/packages/gateway/dist/web/server.js

@@ -73,7 +73,7 @@ import { connectionsOf } from '@buddi/tool-mcp';
 import { CONNECTIONS_CALLBACK_PATH, connectionsRoute } from './connections.js';
 import { browserHost } from '../browser-host.js';
 import { hostService } from '@buddi/tool-host';
-import { listToolPermissions, revokeToolPermission, getArtifact, readArtifactBytes, artifactBytesExist, discardUnreferencedUpload, listLibrary, getLibraryEntry, decodeCursor, filterKey, textPreviewable, readArtifactPrefix, FILE_FAMILIES, LIBRARY_PAGE_MAX, getOwnerProfile, saveOwnerProfile, isKnownTimezone, listGroups, getGroup, createGroup, updateGroup, archiveGroup, deleteGroup, restoreGroup, clearGroupHistory, groupHistorySize, GROUP_UNDO_MS, GroupRefusal, createGroupConversation, listGroupConversations, latestGroupConversation, openGroupRequest, conversationGroup } from '@buddi/core';
+import { listToolPermissions, revokeToolPermission, getArtifact, readArtifactBytes, artifactBytesExist, discardUnreferencedUpload, listLibrary, getLibraryEntry, decodeCursor, filterKey, textPreviewable, readArtifactPrefix, FILE_FAMILIES, LIBRARY_PAGE_MAX, getOwnerProfile, saveOwnerProfile, listGroups, getGroup, createGroup, updateGroup, archiveGroup, deleteGroup, restoreGroup, clearGroupHistory, groupHistorySize, GROUP_UNDO_MS, GroupRefusal, createGroupConversation, listGroupConversations, latestGroupConversation, openGroupRequest, conversationGroup } from '@buddi/core';
 import { EXPORT_MIME, MAX_EXPORT_SOURCE_BYTES, exportFormats, exportName } from '../export/document.js';
 import { ExportRefused, runExport } from '../export/convert.js';
 import { createVault } from '@buddi/core';
@@ -100,6 +100,7 @@ import { arrivalOf } from './access/arrival.js';
 import { CloudflareApiError, createCloudflareApi, CLOUDFLARE_PERMISSION_LINES, CLOUDFLARE_TOKEN_URL } from './access/cloudflare-api.js';
 import { CLOUDFLARE_SETUP_KEY, checkSetupInput, claimSetupOperation, freshProgress, setupBusySentence, setupOperation, removeCloudflareSetup, runCloudflareSetup, } from './access/cloudflare-setup.js';
 import { ownerSecretTokenStore } from './access/cloudflare-token.js';
+import { connectorTokenStore, supervisorConnector } from './access/cloudflare-connector.js';
 import { createAccessRegistry } from './access/registry.js';
 import { createIngress } from './access/ingress.js';
 import { clientKey } from './client-key.js';
@@ -118,14 +119,16 @@ import { createCatalogueService } from './catalogue-source.js';
 import { catalogueBindingOf } from '../agents/platform.js';
 import { pluginFoldersRoute } from './folders.js';
 import { tipsRoute } from '../tips/route.js';
+import { approvalAsk } from './approval-ask.js';
 import { createWidgets, widgetsRoute } from './widgets.js';
 import { createRequirements } from '../plugins/requires.js';
 import { placesList, placesRoute } from './places.js';
 import { peopleRoute } from './people.js';
 import { syncDateMissions } from '../missions/dates.js';
 import { resumeParkedForPage } from '../missions/parked.js';
-import { OWNER_DATE_FORMATS, OWNER_TIME_FORMATS, validDayMonth } from '@buddi/core';
+import { checkProfilePatch } from '../owner-profile-edit.js';
 import { readFacts, webSettingsStore } from '../tips/facts.js';
+import { dismissAgentIntro, readAgentIntro } from '../agents/agent-intro.js';
 import { dismissAgentOffer, isPendingAccept, raiseAgentOffers, readAgentOffers } from './agent-offers.js';
 import { currentVersion, lockVersion, upgradeJobRoute, upgradeRoute, versionCheckRoute, versionRoute, } from './version.js';
 import { leaveRecoveryMode, readRecoveryView } from './recovery.js';
@@ -144,6 +147,7 @@ import { QUIET_UNAVAILABLE_TEXT, pluginCommands } from './composer.js';
 import { createEngagementHooks } from '../missions/engagement.js';
 import { apiTokensRoute, bearerOf, verifyApiToken } from './api-tokens.js';
 import { LockImageRefusal, MAX_LOCK_IMAGE_BYTES, normaliseLockImage } from './lock-image.js';
+import { lockPicturesFrom } from './lock-backgrounds.js';
 import { cancelJobFromWeb, cancelReminderFromWeb, decideApprovalFromWeb, retryJobFromWeb, retryJobsFromWeb, dismissJobsFromWeb, undismissJobsFromWeb, setMissionEnabledFromWeb, keepMissionFromWeb, answerStillUsefulFromWeb, setPausedFromWeb, setScheduleFromWeb, dismissOfferFromWeb, dismissOffersFromWeb, takeOfferFromWeb, } from './write.js';
 /** How long one account's connection test answers again instead of calling the provider. */
 const ACCOUNT_TEST_COOLDOWN_MS = 10_000;
@@ -368,6 +372,7 @@ export function createWebApp(deps) {
         now: deps.now(),
         agentOffers: async () => (await readAgentOffers({
             registry: deps.registry, ctx: deps.ctx, now: deps.now, log, pool: deps.pool, agentIds: () => deps.catalog.list().map((a) => a.id),
+            agentRoles: () => deps.catalog.list().flatMap((a) => a.roles ?? []),
         })).offers,
         signals: async () => {
             const service = deps.connections ?? connectionsOf(deps.registry.manifests());
@@ -378,6 +383,7 @@ export function createWebApp(deps) {
     /** Remove buddi from this Mac: the token its plan mints (web/uninstall.ts). */
     const uninstallTokens = createTokenStore();
     const lock = createLock({ pool: deps.pool, sessions, now: deps.now, get timezone() { return deps.timezone; }, widgets, needsYou, log,
+        pictures: () => lockPicturesFrom(assetsDir),
         // The status bar's answer, so the lock screen's version line never disagrees with it.
         version: async () => lockVersion(await versionRoute({ env: deps.env ?? process.env, log, assetsDir })) });
     const openStreams = new Map();
@@ -496,6 +502,11 @@ export function createWebApp(deps) {
     // A bundle script's run asks every time: its card offers no standing permission (`asksEachTime`).
     const permissionScopes = (tool, envelope) => deps.registry.lookup(tool)?.reusableApproval && !asksEachTime(envelope)
         ? { permissionScopes: ['conversation', 'always'] } : {};
+    /** What a card adds to an approval row: its scopes, and its heading in the owner's words (approval-ask.ts). */
+    const approvalExtras = (a) => ({
+        ...permissionScopes(a.tool, a.envelope),
+        ask: approvalAsk(a.tool, a.preview, deps.registry.list().find((t) => t.name === a.tool)?.description),
+    });
     writeDeps.resumeInteractive = (action, outcome) => chat?.resumeHost(action, outcome);
     /*
      * What an approved MCP write reaches: the functions the dashboard's own
@@ -532,6 +543,8 @@ export function createWebApp(deps) {
             updateNote: (input) => updateNote(deps.pool, input),
             forgetNote: (id) => forgetNote(deps.pool, { id, now: deps.now() }),
         },
+        // buddi.profile_update: Settings → Profile's save, places through the same geocoder.
+        profile: { env: deps.env ?? process.env, log, ...(deps.placesHttp ? { http: deps.placesHttp } : {}) },
     });
     // The binding is the credential: loopback is open, anything else keeps the
     // ticket-and-session gate. The override is a test seam, nothing more.
@@ -629,6 +642,8 @@ export function createWebApp(deps) {
             hand.revoke((lease) => forgotten.has(lease), 'Cloudflare access changed. Sign in again.');
         }
         await ingress.sync();
+        // Cloudflare Access on or off: the supervisor starts or stops its connector to match.
+        void connectorControl()?.sync().catch(() => undefined);
     };
     /*
      * "Set it up for me" (access/cloudflare-setup.ts): one run at a time, in
@@ -643,6 +658,22 @@ export function createWebApp(deps) {
         const row = await readWebSetting(deps.pool, CLOUDFLARE_SETUP_KEY);
         return row && typeof row === 'object' && typeof row.host === 'string' ? row : null;
     };
+    /** The supervisor's connector, when a supervisor runs this gateway (install's cloudflared.ts). */
+    const connectorControl = () => {
+        if (deps.cloudflare?.connector !== undefined)
+            return deps.cloudflare.connector ?? undefined;
+        const socket = (deps.env ?? process.env).BUDDI_SUPERVISOR_SOCKET?.trim();
+        if (!socket)
+            return undefined;
+        return supervisorConnector(socket, connectorTokenStore(deps.pool, createVault({ env: deps.env ?? process.env })));
+    };
+    // Once at startup: a supervisor whose own boot sync could not read the
+    // setting yet (the gateway runs the migrations) catches up now, not at the
+    // next settings save or the hourly tick. Only when Access is on: off, the
+    // supervisor's boot sync already stopped it and there is nothing to catch up.
+    void readCloudflareSetting()
+        .then((setting) => (setting.enabled ? connectorControl()?.sync() : undefined))
+        .catch(() => undefined);
     const setupDepsFor = (token, lease, signal) => ({
         api: createCloudflareApi({ token, transport: deps.cloudflare?.api?.transport, baseUrl: deps.cloudflare?.api?.baseUrl }),
         ingressPort: ingress.port() ?? (askedIngressPort() || null) ?? accessCtx.dashboardPort() + 2,
@@ -653,6 +684,7 @@ export function createWebApp(deps) {
         saveRecord: (record) => writeWebSetting(deps.pool, CLOUDFLARE_SETUP_KEY, record),
         test: (team) => jwks.refresh(team),
         ...(deps.cloudflare?.setup ?? {}),
+        connector: connectorControl(),
         signal,
         lease,
     });
@@ -1246,6 +1278,7 @@ export function createWebApp(deps) {
             ...pagesDeps(),
             pool: deps.pool,
             agentIds: () => deps.catalog.list().map((a) => a.id),
+            agentRoles: () => deps.catalog.list().flatMap((a) => a.roles ?? []),
             // Only a first run under way holds the offers back: an older install
             // that never ran it keeps them.
             firstRunDone: async () => (await getOnboarding(deps.pool)).state !== 'in-progress',
@@ -1360,7 +1393,7 @@ export function createWebApp(deps) {
             env: deps.env ?? process.env,
             ...(deps.telegram ? { telegram: deps.telegram } : {}),
         });
-        // Tips on Home: one quiet card a day, the switch, the pages seen (tips/route.ts).
+        // Tips: the stack the lightbulb on Home opens, and the pages seen (tips/route.ts).
         if (path === '/api/tips' || path.startsWith('/api/tips/')) {
             let body = {};
             if (method === 'POST' || method === 'PUT') {
@@ -1408,13 +1441,13 @@ export function createWebApp(deps) {
                         return answer?.status === 200 && answer.body?.data?.wanted === true;
                     },
                 }),
-            }, { method, path, body, preview: url.searchParams.get('preview') });
+            }, { method, path, body, preview: url.searchParams.get('preview'), peek: url.searchParams.get('peek') === '1' });
             return sendJson(res, answer.status, answer.body);
         }
         // The lock screen: its state and data, Lock now, Unlock, the PIN, its settings and picture (web/lock.ts).
         if (path === '/api/lock' || path.startsWith('/api/lock/')) {
             let body = {};
-            const upload = method === 'POST' && path === '/api/lock/background';
+            const upload = method === 'POST' && (path === '/api/lock/background' || path === '/api/lock/background/portrait');
             if ((method === 'POST' || method === 'PUT') && !upload) {
                 try {
                     body = await readJsonBody(req);
@@ -1823,8 +1856,8 @@ export function createWebApp(deps) {
                 }
                 case '/api/approvals': {
                     const approvals = await readApprovals(deps.pool, now, boundedLimit(q.get('limit'), 50));
-                    return sendJson(res, 200, { pending: approvals.pending.map(a => ({ ...a, ...permissionScopes(a.tool, a.envelope) })),
-                        recent: approvals.recent.map(a => ({ ...a, ...permissionScopes(a.tool, a.envelope) })) });
+                    return sendJson(res, 200, { pending: approvals.pending.map(a => ({ ...a, ...approvalExtras(a) })),
+                        recent: approvals.recent.map(a => ({ ...a, ...approvalExtras(a) })) });
                 }
                 case '/api/offers':
                     // The roster goes in so the read can lapse an offer whose agent is
@@ -2279,6 +2312,14 @@ export function createWebApp(deps) {
                 res.end(method === 'HEAD' ? undefined : file.text);
                 return;
             }
+            // A new agent's chat: the once-only strip, both directions of delegation (agents/agent-intro.ts).
+            const agentIntro = /^\/api\/agents\/([^/]+)\/intro$/.exec(path);
+            if (agentIntro) {
+                const view = await readAgentIntro(deps.pool, deps.catalog, decodeURIComponent(agentIntro[1]));
+                if (!view)
+                    return sendJson(res, 404, { error: 'no such agent' });
+                return sendJson(res, 200, view);
+            }
             // The Skills tab: every skill the agent loads, learned ones with their versions.
             const agentSkills = /^\/api\/agents\/([^/]+)\/skills$/.exec(path);
             if (agentSkills) {
@@ -2318,7 +2359,7 @@ export function createWebApp(deps) {
                 const action = await getAction(deps.pool, decodeURIComponent(approval[1]));
                 if (!action)
                     return sendJson(res, 404, { error: 'no such action' });
-                return sendJson(res, 200, { action: { ...toApprovalView(action), ...permissionScopes(action.tool, action.envelope) } });
+                return sendJson(res, 200, { action: { ...toApprovalView(action), ...approvalExtras(action) } });
             }
             /* ---------------- chat ---------------- */
             const groupConversations = /^\/api\/groups\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/conversations$/i.exec(path);
@@ -2716,7 +2757,7 @@ export function createWebApp(deps) {
                     // The token stays kept: the panel offers to forget it (…/setup/forget-token), and Set it up again reuses it.
                     return sendJson(res, 200, await setupView());
                 }
-                const input = { host: str(body.host), email: str(body.email), zone: str(body.zone) || undefined, adopt: body.adopt === true };
+                const input = { host: str(body.host), email: str(body.email), zone: str(body.zone) || undefined, adopt: body.adopt === true, useSystemDaemon: body.useSystemDaemon === true };
                 const invalid = checkSetupInput(input);
                 if (invalid)
                     return sendJson(res, 400, { error: invalid });
@@ -3853,47 +3894,11 @@ export function createWebApp(deps) {
          * the owner may write here directly; the same validation, the same row.
          */
         if (path === '/api/owner') {
-            const patch = {};
-            for (const key of ['preferredName', 'timezone', 'language', 'about', 'fullName', 'pronouns']) {
-                const given = body[key];
-                if (given === undefined)
-                    continue;
-                if (given !== null && typeof given !== 'string')
-                    return sendJson(res, 400, { error: `\`${key}\` must be a string or null` });
-                patch[key] = given;
-            }
-            // How times and dates read: a known word, or null for Auto.
-            if (body.timeFormat !== undefined) {
-                if (body.timeFormat !== null && !OWNER_TIME_FORMATS.includes(body.timeFormat))
-                    return sendJson(res, 400, { error: '`timeFormat` is 12h, 24h or null (Auto).' });
-                patch.timeFormat = body.timeFormat;
-            }
-            if (body.dateFormat !== undefined) {
-                if (body.dateFormat !== null && !OWNER_DATE_FORMATS.includes(body.dateFormat))
-                    return sendJson(res, 400, { error: '`dateFormat` is short, long, iso or null (Auto).' });
-                patch.dateFormat = body.dateFormat;
-            }
-            if (patch.timezone && !isKnownTimezone(patch.timezone))
-                return sendJson(res, 400, { error: `"${patch.timezone}" is not a timezone this host knows.` });
-            if (patch.preferredName && patch.preferredName.length > 80)
-                return sendJson(res, 400, { error: 'The name is too long (80 characters at most).' });
-            if (patch.about && patch.about.length > 1000)
-                return sendJson(res, 400, { error: 'Keep the line about you under 1,000 characters.' });
-            if (patch.fullName && patch.fullName.length > 120)
-                return sendJson(res, 400, { error: 'The full name is too long (120 characters at most).' });
-            if (patch.pronouns && patch.pronouns.length > 40)
-                return sendJson(res, 400, { error: 'Keep the pronouns under 40 characters.' });
-            // The birthday: day and month (the year optional), or null to clear it.
-            if (body.birthday !== undefined) {
-                if (body.birthday === null)
-                    patch.birthday = null;
-                else {
-                    const birthday = validDayMonth(body.birthday);
-                    if (!birthday)
-                        return sendJson(res, 400, { error: 'The birthday needs a real day and month; the year is optional.' });
-                    patch.birthday = birthday;
-                }
-            }
+            // The same checks as owner.set_profile and buddi.profile_update (owner-profile-edit.ts).
+            const checked = checkProfilePatch(body);
+            if (!checked.ok)
+                return sendJson(res, 400, { error: checked.error });
+            const patch = checked.patch;
             // The zone applies at once; schedules kept in the old one move with it.
             const { profile, zoneChange } = await saveOwnerProfile(deps.pool, patch, deps.env ?? process.env);
             // The birthday greeting follows the new day at once (missions/dates.ts).
@@ -4008,6 +4013,14 @@ export function createWebApp(deps) {
                 return sendJson(res, 500, { error: err instanceof Error ? err.message : String(err) });
             }
         }
+        const introDismissed = /^\/api\/agents\/([^/]+)\/intro\/dismiss$/.exec(path);
+        if (introDismissed) {
+            const id = decodeURIComponent(introDismissed[1]);
+            if (!deps.catalog.get(id))
+                return sendJson(res, 404, { error: 'no such agent' });
+            await dismissAgentIntro(deps.pool, id);
+            return sendJson(res, 200, { ok: true });
+        }
         const delegatesRoute = /^\/api\/agents\/([^/]+)\/delegates$/.exec(path);
         if (delegatesRoute) {
             const search = agentSearchPath(deps.env ?? process.env);